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DETAILED ACTION 

1 . This action is responsive to communication: filed on 23 May 2005 with an original 
application filed on 28 June 2001. 

2. Claims 1-30 are currently pending in this appHcation. Claims 1, 7, 11, 17, and 21 are 
independent claims. Claims 1, 2, 1 1, 12, 21, and 22 have been modified. 

Response to Arguments 

3. Applicant's arguments with respect to claims 1-30 have been considered but have not 
been found persuasive. 

In response to applicant's argument on page 17, ''Independent claims ... each include a 
similar feature of a callback function that must be accessed in order to receive the decrypted 
content sti^eam, Yeung does not teach or suggest accessing a callback function in order to 
receive the decrypted content stream In support of the rejection of the claims that originally 
included the callback function the Examiner cited Yeung at col, 7, lines 34-54 and at col. 7, lines 
8-67, In Yeung, it appears that it is the degree of successful replication of key(s) that controls 
the level of access to delivered, content ... Thus, while Yeung relies on the successful 
replicationof key(s) to determine what level of quality is available for playback of the content ... 
the present claimed invention rehes on access to the callback function in order to receive the 
decrypted content''. The Office disagrees, in Yeung the callback function can be described as 
the mechanism by which the content is protected this mechanism is a function of hardware and 
software (i.e. a callback function). The reference describes the protection mechanism in col. 3, 
lines 11-14. Yeung also describes that this protection mechanism is in the content provider 
server and is later provider to the user's playback device, after successful authentication with the 
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protection mechanism at the server. The description of the distribution of this protection 
mechanism (i.e. callback function) is described in col. 7, Unes 34-67 "Referring to FIG. 4, an 
illustrative block diagram of an embodiment of a client platform 120 is shown. Upon delivery, 
content 290 is store in memory unit 410. After being delivered in its entirety or in part during 
content streaming, client platform 120 fetches its client identifier and/or other auxiliary 
information . . . More specifically, in one embodiment content 290 is provided from memory unit 
410, in the form of data blocks, to content protection mechanisms 420, 430, 440 performing a 
data descrambling scheme, a visual/perceptual descrambling scheme and an optional watermark 
extraction scheme on the data blocks supplied ... As shown, before providing content 290 to a 
content player 450 for playback, CPU_ID 150 (or secure platform signature 155) of client 
platform 120 and/or selected auxiliary information are fetched and input into a mapping ftinction 
460 in an attempt to produce a copy of key(s) 250 that were used by data scrambling mechanism 
260 and visual/perceptual scrambling mechanism 270 of server platform 1 10 (see FIG. 2). 
Hence, mapping function 460 is identical to mapping function 270 operating on server platform 
1 1 0 of FIG. 2. Based on selected transformations of mapping function 460, one or more keys are 
provided to both data descrambling mechanism 420 and visual perceptual descrambling 
mechanism 430". In the Yeung references the "playback function" is the protection 
mechanism(s) 420, 430, and 440 (client side) and 240, 250, 260, 270, 280, and 290 (see *246 col. 
5, line 62 through col. 6, Une 64 (server side). 

In response to applicant's argument on page 18, 'Tetmg does disclosure a playback 
window^ that may he used to allow the content provider to review the content prior to undergoing 
selected data scrambling, visual scrambling, an/or watermarking schemes ... The playback 
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window of Yeimg is not accessed in order to receive the decrypted content stream. Thus, the 
playback window of Yeung is very different from the claimed callback function of the present 
invention'. The Office disagrees in Yeung the playback function is not the playback window but 
rather the protection mechanisms 420, 430, and 440 (client side) and 240, 250, 260, 270, 280, 
and 290 (see '246 col. 5, line 62 through col. 6, line 64 (server side). These protection 
mechanisms were previously described in the above paragraph. The playback window or the 
warning window that the client platform generates is just additional software functions of the 
Yeung invention. 

Claim Rejections -35 USC §102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A i^erson shall be entitled to a patent unless - 

(e) the invention was described in (I) an application for patent, published under section 122(b), by another filed 
in the United States before tlie invention by the applicant for patent or (2) a patent granted on an application for 
patent by another liled in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 2 1 (2) of such treaty in the English language 

5. Claims 1-30, are rejected under 35 U.S.C. 102(e) as being anticipated by Yeung et al. 
U.S. Patent No. 6,668,246 (hereinafter '246). 

As to independent claim 1, "A method comprising: performing security authentication of 
a content driver in order to verify an identity of the content driver as a secure content driver" is 
taught in '246 col. 2, lines 28-59; 

"once the identity of the secure content driver is authenticated, providing the secure 
content driver with access to a callback function such that access to the callback function enables 
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the secure content driver to receive decrypted content stream" is shown in '246 col. 7, 
lines 34-67; 

"receiving an encrypted content stream from the secure content driver; performing 
integrity authentication of a run-time image of the secure content driver" is shown in '246 col. 3, 
line 29 through col. 4, line 13; 

"and while integrity authentication of the secure content driver is verified, streaming 
decrypted content via the callback function to the secure content driver to enable playback of the 
decrypted content to a user" is disclosed in '246 col. 4, Unes 21-56. 

As to dependent claim 2, "wherein performing security authentication further comprises: 
locating authorization information of the secure content driver; decrypting the authorization 
information received from the secure content driver; authenticating an identity of the secure 
content driver based on the decrypted authorization information; and authenticating an identity of 
the secure content driver based on the decrypted authorization information" is taught in '246 col. 
7, lines 34-54. 

As to dependent claim 3, "wherein authenticating the identity fiarther comprises: 
calculating a hash value of a static image of the secure content driver prior to loading the secure 
content driver into memory; selecting a stored digital signature of the static image; decrypting 
the stored digital signature to retrieve a pre-calculated hash value of the secure content driver; 
comparing the pre-calculated hash value with the calculated hash value; and when the calculated 
hash value matches the pre-calculated hash value of the secure content driver, notifying the 
secure content driver of successftil security authentication" is shown in '246 col. 3, line 64 
through col. 4, line 13. 
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As to dependent claim 4, "wherein performing security authentication further comprises: 
once security authentication of the content driver is established, determining a run-time at 
memory location of the secure content driver; and establishing a function entry point for 
receiving the stream of encrypted content from the secure content driver" is disclosed in '246 
col. 7, Unes 8-21. 

As to dependent claim 5, "further comprising: receiving a content decryption key in order 
to enable decryption of encrypted content streams received from the secure content driver; 
receiving a digital signature of a static image of the secure content driver; and receiving a digital 
signature of a rim-time image of the secure content driver" is taught in '246 coL 3, line 64 
through col 4, line 13. 

As to dependent claim 6, "wherein performing integrity authentication further comprises: 
decrypting the encrypted content stream received from the secure content driver; while 
decrypting the received encrypted content stream, performing a hash value calculation of code 
segments that perform functionality of the secure content driver while loaded in memory; 
selecting a stored digital signature of a run-time image of the secure content driver; decrypting 
the digital signature to reveal a run-time hash value; comparing the computed hash value with 
the run-time hash value of the secure content driver; and while the calculated hash value matches 
the run-time hash value of the secure content driver, repeating the decryption, the performing, 
the selecting and the comparing until decryption of the received encrypted content stream is 
complete" is shown in '246 col. 3, line 41 through col. 4, line 21. 

As to independent claim 7, "A method comprising: establishing security authentication 
from a content decryption component, such that a content driver is verified as a secure content 
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driver; when establishment of security authentication is successful, receiving access to a callback 
function in order to receive clear, decrypted content streams from the content decryption 
component; receiving a stream of encrypted content; streaming the encrypted content to the 
content decryption component; and when security authentication is successfully established, 
receiving clear, decrypted content from the content decryption component via the received 
callback function" is disclosed in '246 col. 7 lines 8-67. 

As to dependent claim 8, "wherein establishing security verification further comprises: 
receiving a request for authorization information from the content decryption component; 
transmitting the requested authorization information to the content decryption component; and 
when security authentication is successfully established, receiving notification of successful 
security authentication from the content decryption component, such that the content driver is 
established as the secure content driver" is shown in '246 col. 3, Hne 29 through col. 4, line 13. 

As to dependent claim 9, "wherein establishing security authentication further comprises: 
once security authentication is established, providing content decryption component with a 
memory location wherein the secure content driver is loaded at run-time; and providing the 
content decryption component with a function entry point for receiving the stream of encrypted 
content" is disclosed in '246 col. 7, line 8-21. 

As to dependent claim 10, "wherein receiving encrypted content further comprises: 
receiving encrypted content from a content source reader; and receiving a direction from a 
content driver to stream the encrypted content to the content decryption component" is taught in 
'246 col. 7, Unes 35-43. 
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As to independent claim 1 1, this claim is directed to a computer readable medium of the 
method of claim 1; therefore it is rejected along similar rationale. 

As dependent claims 12- 16, these claims contain substantially similar subject matter as 
claims 2-6; therefore they are rejected along similar rationale. 

As to independent claim 17, this claim is directed to a computer readable medium of the 
method of claim 7; therefore it is rejected along similar rationale. 

As dependent claims 18-20, these claims contain substantially similar subject matter as 
claims 8-10; therefore they are rejected along similar rationale. 

As to independent claim 21, this claim is directed to the apparatus of the method of claim 
] ; therefore it is rejected along similar rationale. 

As dependent claims 21-26, these claims contain substantially similar subject matter as 
claims 2-6; therefore they are rejected along similar rationale. 

As dependent claims 27-30, these claims contain substantially similar subject matter as 
claims 7-10; therefore they are rejected along similar rationale. 

Conclusion 

THIS ACTION IS MADE FENAL. AppHcant is reminded of the extension of time policy as 
set forth in 37 CFR 1 .136(a). A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event a first reply is filed 
within TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the shortened 
statutoiy period will expire on the date the advisory action is mailed, and any extension fee 
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pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In 
no event, however, will the statutory period for reply expire later than SIX MONTHS from the 
mailing date of this final action. 



examiner should be directed to Ellen C Tran whose telephone number is 
(571) 272-3842. The examiner can normally be reached from 6:30 am to 3:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory A Morse can be reached on (571) 272-3838. The fax phone number for the 
organization where this application or proceeding is assigned is (571) 273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or PubUc PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Any inquiry concerning this communication or earlier communications from the 



Ellen. Tran 
Patent Examiner 
Technology Center 2134 
19 August 2005 




